International Association of Privacy Professionals

Regulator inquiries into major AI companies' cybersecurity practices are ramping up. A day after reports surfaced about the likely escalation of a U.S. Federal Trade Commission probe into OpenAI and other developers, California Attorney General Rob Bonta advanced his office's ongoing OpenAI investigation. Bonta announced the company was served an investigative subpoena to compel more details about model security and the risks they pose.

It feels like a long time ago that Andrew Ferguson, then a commissioner, and now the chair of the U.S. Federal Trade Commission, wrote a dissent against the agency's settlement with Rytr. But it was only two years ago. At the time, Ferguson, joined by Commissioner Melissa Holyoak, dissented from the FTC's consent order penalizing Rytr for providing an artificial intelligence writing tool capable of generating fake consumer reviews.

On International Right to Know Day, I found myself walking through a digital museum inside a real one. The Information and Privacy Commissioner of Ontario had brought its Transparency Showcase to the Royal Ontario Museum, highlighting organizations that are finding practical ways to make government and, increasingly, artificial intelligence more understandable. It got me thinking about something we don't talk about enough in regulation. The stick matters.

Count members of U.S. Congress among the many concerned with the current trajectory of artificial intelligence's rogue capabilities and the wide range of risks they pose to users, businesses and the broader public.

A scandal is shaking the literary world: the author of a book short-listed for some of the most prestigious literary prizes is accused of having substantively used artificial intelligence to write it. The scandal comes as the AI community and society at large are seized by concerns about cybersecurity and agentic AI and debating whether leading AI frontier labs should pace their pursuit of technological development.

This month has seen another whirlwind of generative AI incidents. Or at least the reporting of them. From more AI agents getting up to no good, to the first known intentional agentic AI attack reported to a regulator, followed by the first, and then second government data breaches by an AI agent, Axios has reported that companies are currently probing tens of thousands of security incidents. While these AI incidents are starting to sound commonplace, each event should be taken very seriously.

The U.S. will stick to a self-regulatory framework for major artificial intelligence developers following the latest round of discussions between U.S. President Donald Trump's administration and Big Tech CEOs. Following a roundtable with President Trump, Anthropic, Google, Meta, Nvidia, OpenAI and xAI and signed on to the White House's "Joint Commitment on Frontier Responsibilities," a four-point AI safety plan focused on independent audits and "robust internal controls." The internal...

U.S. President Donald Trump 29 Sept. issued an executive order titled "Inaugurating the Era of Super Intelligence," directing executive departments and agencies to replace the terms "artificial intelligence" and "AI" with "super intelligence" and "SI" in official federal communications and other nonstatutory documents. The immediate change is linguistic, not a wholesale rewrite of U.S. laws governing AI.

Artificial intelligence is not just changing technology. It is breaking the operating assumptions behind modern governance. For years, privacy and compliance programs have relied on static inventories, manual reviews, fragmented controls and governance processes built for a slower world. But AI systems move continuously, act autonomously, and operate across data ecosystems far too large for traditional oversight models to manage.

Skip to Content ANALYSISMEMBER The EU KIDS Act targets a broad range of digital services with new age-assurance and safety-by-design obligations. Mathilde Renou Director of the Brussels Office Mazagan Published 17 Sept., the EU KIDS Act moved from embryo to full-fledged legislative proposal in under a year, underlining how crucial online child safety is in European Commission President Ursula von der Leyen's second mandate.